Cyber Security Quiz
10 questions · no time limit
0:00
SECURITY OPERATIONS AND MONITORING
Question 1 of 10
No time limit
Current
Answered
Flagged
Not seen
PASSAGE
A host booted while its wall clock was five minutes slow. At system uptime 20 seconds, it logged a suspicious process at wall-clock time 03:55:20. At uptime 40 seconds, NTP moved the wall clock forward five minutes. An accurately synchronized network sensor recorded the host's first related connection at 04:00:30 UTC.
What chronology should the analyst derive by correlating wall-clock and uptime evidence?
YOUR PROGRESS
10
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
KEYBOARD
Pick an answer ABCD
Next question ↵→
Previous ←
Flag for review F
Answers save as you go · flagged questions come back at the end